On Tue, Sep 17, 2013 at 2:38 PM, Jonathan Vanasco <jonat...@findmeon.com>wrote:
> def verify( hashed , password ): > if hash(password) == hashed : return True > return False > Your verify is vulnerable to timing attacks. :-) -- You received this message because you are subscribed to the Google Groups "pylons-discuss" group. To unsubscribe from this group and stop receiving emails from it, send an email to pylons-discuss+unsubscr...@googlegroups.com. To post to this group, send email to pylons-discuss@googlegroups.com. Visit this group at http://groups.google.com/group/pylons-discuss. For more options, visit https://groups.google.com/groups/opt_out.
